AUTHENTICATION AND VALIDATION SYSTEMS FOR GAMING DEVICES

• US 20100062844A1
• Filed: 11/16/2009
• Published: 03/11/2010
• Est. Priority Date: 03/05/2003
• Status: Abandoned Application

• Current Assignee: Sg Gaming, Inc. (Light & Wonder Incorporated)
• Original Assignee: Bally Gaming Incorporated (Light & Wonder Incorporated)
• Inventors: Buckeyne, Thomas E., Cadima, Ronald A., Patel, Pravinkumar, Green, Anthony E., Singh, Anand, Crowder, Robert W. JR.
• Application Number:
  US12/619,639
• Publication Number:
  US 20100062844A1
• Time in Patent Office: Days
• US Class Current: 463/29
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/575 Secure boot
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2109 Game systems
• CPC Class Codes: G07F 17/32 for games, toys, sports, or amusements
• CPC Class Codes: G07F 17/3241 Security aspects of a gaming system, e.g. detecting cheating, device integrity, surveillance computer security G06F21/00

Abstract

Systems and methods for authenticating and validating a device are disclosed herein. In one method, a manifest file is created for a gaming component, wherein the manifest file includes contents of each file from the gaming component. A digital signature is generated for each file from the gaming component, wherein the digital signature is created by using the contents of each file. Each digital signature is saved with each file in the manifest file. A digital signature calculation is performed on a file accessed during a bootup process. The contents of the accessed file are validated by comparing the calculated digital signature to the saved digital signature, and an error message is presented on a video display when the contents of the accessed file is not validated.

Claims

1. A method for verifying a gaming component, the method comprising:

creating a manifest file for a gaming component, wherein the manifest file includes contents of each file from the gaming component;

generating a digital signature for each file from the gaming component, wherein the digital signature is created by using the contents of each file;

saving each digital signature with each file in the manifest file;

performing a digital signature calculation on a file accessed during a bootup process;

validating the contents of the accessed file by comparing the calculated digital signature to the saved digital signature; and

presenting an error message on a video display when the contents of the accessed file is not validated.

2. The method of claim 1, further comprising:

generating a digital signature of the completed manifest file; and

saving the digital signature of the completed manifest file in a header of the manifest file.

3. The method of claim 2, further comprising:

performing a digital signature calculation on the completed manifest file;

validation the manifest file by comparing the calculated digital signature for the completed manifest file to the saved digital signature.

4. The method of claim 1, wherein the digital signature is a Pintsov-Vanstone Signature Scheme with Partial Message Recovery (PVSSR) signature.

5. A method of verifying a gaming component, the method comprising:

determining if the manifest is authentic, the manifest including component information and a stored digital signature for the gaming component;

performing a digital signature calculation using the contents of the component to produce a calculated digital signature if the manifest is authentic;

verifying the gaming component by comparing the calculated digital signature to the stored digital signature; and

loading the gaming component if the calculated digital signature and the stored digital signature are equal.

6. The method of claim 5, wherein authenticating the manifest includes performing a digital signature algorithm on the manifest.

7. The method of claim 5, wherein the component is verified when the component is retrieved for operation of a device.

8. The method of claim 5, wherein the component is verified on a continuing basis during operation of a device.

9. The method of claim 5, wherein the digital signature is a Pintsov-Vanstone Signature Scheme with Partial Message Recovery (PVSSR) signature.

10. A method for verifying a gaming component, the method comprising:

identifying a validation protocol used to create a digital signature for a gaming component;

determining if the manifest is authentic, the manifest including component information and a stored digital signature for the gaming component;

performing a digital signature calculation using the contents of the component to produce a calculated digital signature;

verifying the gaming component by comparing the calculated digital signature to the stored digital signature; and

presenting an error message on a video display when the contents of the accessed file is not validated.

11. The method of claim 10, wherein authenticating the manifest includes performing a digital signature algorithm on the manifest.

12. The method of claim 10, wherein the component is verified when the component is retrieved for operation of a device.

13. The method of claim 10, wherein the component is verified on a continuing basis during operation of a device.

14. The method of claim 10, wherein the digital signature is a Pintsov-Vanstone Signature Scheme with Partial Message Recovery (PVSSR) signature or a SHA-1 Hash.